CVE-2019-14895

What it actually does

Heap-based buffer overflow in the Marvell WiFi chip driver of the Linux kernel (versions 3.x and 4.x before 4.18.0) triggered during connection negotiation when processing remote device country settings, enabling denial of service or arbitrary code execution.

Why it matters to the business

Affected Linux systems using Marvell WiFi hardware face risk of remote crashes or full system compromise, disrupting operations and potentially allowing persistent attacker access on wireless-enabled devices.

How an attack unfolds

An attacker positioned to interact with the target WiFi station crafts malicious country information elements in 802.11 management frames; when the station processes these during connection negotiation the overflow occurs, allowing code execution or crash.

How to fix it

Upgrade the Linux kernel to version 4.18.0 or newer on all affected systems; apply vendor backports where available for supported distributions; disable Marvell WiFi hardware if the driver cannot be updated.

How to confirm the fix worked

Verify kernel version is at least 4.18.0; review driver source for the patched country IE handling logic; perform connection tests with varied country settings in a lab environment.

Typical attack path

1. Position as a rogue or compromised access point sending 802.11 frames
2. Include oversized or malformed country IE during association or negotiation
3. Trigger heap overflow in the Marvell driver handler
4. Achieve denial of service or execute arbitrary kernel code

How to detect it

Inspect kernel logs for oops/panic entries referencing the Marvell WiFi driver during association events; correlate with unusual 802.11 country IE frames captured on wireless interfaces.

• marvell wifi driver oops
• country ie buffer overflow
• mwifiex country info handling panic

What your security team should do

• Prioritize kernel upgrades on all systems exposing Marvell WiFi interfaces
• Restrict wireless network exposure until patches are deployed
• Monitor kernel logs for Marvell driver-related panics